如何在Windows 2008/IIS7上安装多个SSL？
我们在这里搜索了这个主题，发现很多帖子涵盖了这个主题的不同部分，但我们没有找到并回答我们的解决方案。
问题：
- 我们有带有 IIS7 的 Windows 2008 Server 我们想安装更多 然后该服务器上有一个 SSL。
- 我们为此有一个 IP 地址 服务器，但也许我们可以得到更多 我们发现在一个 IP 地址上只能有一个 SSL
问题：
- 如果我们没记错的话，我们只能有 Windows 2008 / IIS7 上的一个 SSL，如果我们 只有一个IP？
- 我们找到了 SSL 证书 多个域但这不是 适合我们，因为在绿色盒子里 仅在地址栏中可见 一家公司（这适用于一个 拥有多个网站的公司）。因此，唯一的选择是为每个不同的公司购买不同的 SSL，设置 IIS7 支持此操作的最佳方法是什么？
- 我们可以托管不同的网站吗（每个 具有自己的 SSL）在同一 IIS7 上 网络服务器？我们有什么选择？
谢谢 亚历克斯
We searched about this topic here and found lot of posts that cover different parts from this topic but we didn't find and answer for our solution.
Problem:
- We have Windows 2008 Server with IIS7
and we would like to install more
then one SSL on this server. - We have one IP address for this
server but maybe we could get more of
them, and we found that we can have only one SSL on one IP address
Questions:
- If we are not wrong, we can have only
one SSL on Windows 2008 / IIS7 if we
have only one IP? - We found SSL certificates for
multiple domains but this is not
suitable for us because in green box
in Address bar will be visible only
one company (this is suitable for one
company that has multiple websites). So the only option is to buy different SSL for each different company and what is the best way to set IIS7 to support this? - Can we host different websites (each
with its own SSL) on same IIS7
webserver? What are our options?
Thanks
Alex
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
遗憾的是，目前无法向单个 IP 地址上的多个域颁发多个 SSL 证书。 SSL 证书、域名和 IP 之间必须存在一对一的关系。因此，您唯一的选择是为服务器获取额外的 IP 地址。
您可以使用主机标头来部分解决问题，但从您的问题推断，我假设您已经遇到过这种情况，并忽略它作为一个可行的选择。以防万一有人在谷歌上搜索并发现这个问题：
主机标头允许您将单个证书（多域或通配符）绑定到单个 IP 地址上的多个域，例如：
有关如何配置此功能的更多信息可以在此处找到：
http://www.sslshopper.com/article-ssl-host -headers-in-iis-7.html
Unfortunately it is not currently possible to have multiple SSL certificates issued to multiple domains on a single IP address. There has to be a one to one relationship between SSL certificate, domain and IP. So you only option is to get additional IP address for the server.
You can use Host Headers to partially solve the problem, but inferring from your question I assume you have already encountered this and disregarding it as a viable option. Just incase anybody is googling and finds this question:
Host Headers allows you to bind a single certificate (multidomain or wildcard) to multiple domains on a single IP address, for example:
More info on how to configure this can be found here:
http://www.sslshopper.com/article-ssl-host-headers-in-iis-7.html
另一种选择是使用与 443 不同的端口和相同的 IP。
加;看一下：在 IIS 7 中使用主机标头和 SSL（没有 appcmd 的丑陋）
Another option is using different port than 443 with same ip.
Plus; have a look: Using Host Headers and SSL in IIS 7 (without the ugliness of appcmd)
如果您需要每个网站在证书中显示不同的公司，目前唯一可用的选择是获取其他 IP 地址。您只需创建其他 IIS 网站并将它们绑定到新的 IP 地址即可。
If you need each website to show a different company in the certificate, the only option available currently is getting additional IP addresses. You will simply create additional IIS websites and bind them to the new IP addresses.
由于微软规定，Windows Server 2008 R2无法升级到IIS 8，IIS最高版本为7.x；然而，我找到了一种方法，通过主机标头机制让多个 SSL 站点使用相同的默认 HTTPS 端口 (443)。 此处提到了这一点，如果您需要有关主机标头机制的说明，可以查看一下此处。
Due to a Microsoft rule, Windows Server 2008 R2 can't be upgraded to IIS 8, the maximum IIS version is 7.x; however I found a way to have more than one SSL sites using the same default HTTPS port (443) by the Host Headers mechanism. It is mentioned here and if you need clarifications about the Host Headers mechanism you can take a look here.